When I try edit or make a new policy return this message:
Error saving lifecycle policy logs
400: Bad Request. [request body._meta]: definition for this key is missing
This is my config:
readonlyrest:
audit_collector: true
access_control_rules:
- name: "::LOGSTASH::"
auth_key: logstash:logstash
verbosity: error
- name: "::APM::"
auth_key: apmserver:apmserver
verbosity: error
- name: "::KIBANA-SRV::"
auth_key: kibana:kibana
kibana_access: unrestricted
- name: "::FILEBEAT::"
auth_key: filebeat:filebeat
verbosity: error
- name: "::RO::"
auth_key: ro:dev
kibana_access: ro
indices: [ ".kibana", "logstash-*"]
kibana_hide_apps: [ "Security", "Enterprise Search"]
- name: "::RW::"
auth_key: rw:dev
kibana_access: rw
indices: [".kibana", "logstash-*"]
kibana_hide_apps: [ "Security", "Enterprise Search"]
- name: "::ADMIN::"
auth_key: elastic:teste
# KIBANA ADMIN ACCESS NEEDED TO EDIT SECURITY SETTINGS IN ROR KIBANA APP!
- name: "::WEBSITE SEARCH BOX::"
indices: ["public"]
actions: ["indices:data/read/*"]
- name: "ldapA"
type: allow
ldap_auth:
name: "ldap1"
groups: ["GG_ApoioTecnologico"]
- name: "ldapU"
type: allow
ldap_auth:
name: "ldap1"
groups: ["GG_ELK_IGESP"]
kibana_access: ro
indices: [ ".kibana", "*igesp*"]
kibana_hide_apps: [ "Security", "Enterprise Search"]
ldaps:
.
.
.